Re: Is Python suitable for a huge, enterprise size app?

Paul Rubin wrote: 
Dave Brueck <dave@xxxxxxxxxxxxxxxxxxx> writes:

One thing from your experience that did resonate with me is that,
except for ftplib and occasionally urllib (for basic, one-shot GETs),
we don't use any of the standard library's "protocol" modules - partly
because we had to implement our own HTTP libraries for performance and
scalability reasons anyway, and partly because we had trouble figuring
out e.g. all the ins and outs of urllib/urllib2/httplib.


What do you use for HTTPS? 

Hi Paul,

m2crypto (plus some patches to make asynchronous SSL do what we needed).

And did you use the Cookie module in your
HTTP servers?  You may have had problems without even being aware of
them (until recently if you used Cookie with its default settings, any
attacker could completely take over your server by sending you
carefully concoted cookies).

Are you referring to the use of pickle for cookie serialization? In any case, we didn't use Cookie.py from the stdlib (on the servers, nearly everything related to URLs & HTTP was custom-built, with the exception of urlparse, for the aforemenioned reasons).

-Dave
.

Relevant Pages

  • [UNIX] Alteon ACEdirector Signature/Security Bug
    ... A new security bug has been discovered in the Nortel Alteon ACEdirector ... HTTP clients could exploit it to determine the IP addresses of ostensibly ... "hidden" web servers that are load-balanced by the ACEdirector. ... uses it to persistently map a series of HTTP client requests to the same ...
    (Securiteam)
  • Re: rpc ober http problem
    ... Now it seems, that rpc over http is working, don't know ... I can read and write mail messages from my outlook client ... >don't need to expose the global catalog servers if the ...
    (microsoft.public.exchange.connectivity)
  • Windows Updates: Firewall setting for outbound traffic
    ... outbound traffic from the servers to the internet. ... This includes HTTP. ... I don't want my servers to be accessible, ... This means that I must create outbound rules on my firewall allowing ...
    (microsoft.public.windowsupdate)
  • Re: TRACE Request: how to disable in IIS5
    ... Trace is a HTTP verb (like get and post and etc. ... together from a http request. ... all Web servers have TRACE ...
    (microsoft.public.inetserver.iis.security)
  • Re: WebRequest question
    ... web servers with limited features. ... out 90 seconds for connection) expires for second web request to be started. ... The same back to back web requests works fine on some http servers (hardware ...
    (microsoft.public.dotnet.languages.csharp)